From 9642cbe5ec6098ce62ea019bf7065ae4b50a990e Mon Sep 17 00:00:00 2001
From: Konrad Bucheli <konrad.bucheli@psi.ch>
Date: Mon, 11 Mar 2024 17:03:17 +0100
Subject: [PATCH] document DMZ deployment

---
 _toc.yml                      | 1 +
 admin-guide/deployment/dmz.md | 3 +++
 2 files changed, 4 insertions(+)
 create mode 100644 admin-guide/deployment/dmz.md

diff --git a/_toc.yml b/_toc.yml
index 00dc5fe5..77dfbd4d 100644
--- a/_toc.yml
+++ b/_toc.yml
@@ -67,6 +67,7 @@ chapters:
       - file: admin-guide/deployment
         sections:
           - file: admin-guide/deployment/sample
+          - file: admin-guide/deployment/dmz
           - file: admin-guide/deployment/reinstall
           - file: admin-guide/deployment/partitioning
           - file: admin-guide/deployment/sysdb_env
diff --git a/admin-guide/deployment/dmz.md b/admin-guide/deployment/dmz.md
new file mode 100644
index 00000000..afe3c598
--- /dev/null
+++ b/admin-guide/deployment/dmz.md
@@ -0,0 +1,3 @@
+# DMZ deployment
+
+The deployment in the DMZ ist the same as [internaly](sample), the only exception is that for Puppet you need to [order a firewall rule](https://psi.service-now.com/psisp?id=psi_new_sc_cat_item&sys_id=faccb8644fe58f8422b0119f0310c7f7) from your machine to `puppet01.psi.ch` using TCP port 8140.